Behavioral task
behavioral1
Sample
2658bea1c13a9cead69a96753b3ba4c3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2658bea1c13a9cead69a96753b3ba4c3.exe
Resource
win10v2004-20231215-en
General
-
Target
2658bea1c13a9cead69a96753b3ba4c3
-
Size
1.1MB
-
MD5
2658bea1c13a9cead69a96753b3ba4c3
-
SHA1
fd025bff67422689a6bfbc5a5a1c323e23bfb148
-
SHA256
5cf76cc751666b28f572927987827ef6e392a016ce49abf9f5250706218b4745
-
SHA512
7a62339dcb2d59eb2e17858b39c6a9a36dcc28be61f3f7a3c177c4a157ddd0b99690ce0cda7ee9fc64a5ba4a208d4a382923d89a92c3cc0777b33d3b56bea092
-
SSDEEP
24576:hNDnsXacfiqym7RBXOoVG1Uw3dsbPV+dR80lvAC1PsvgZC2:hNDnwwm7b/22oi0NAC1PsvgQ2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2658bea1c13a9cead69a96753b3ba4c3
Files
-
2658bea1c13a9cead69a96753b3ba4c3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE